From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 12 Feb 2013 19:36:30 +0000 (+0100)
Subject: Explicitely add hardening CFLAGS.
X-Git-Url: http://git.ipfire.org/?p=people%2Fstevee%2Fpakfire.git;a=commitdiff_plain;h=6216f7249be57583516131398d98eadc2ca1a08d;ds=sidebyside

Explicitely add hardening CFLAGS.
---

diff --git a/macros/cflags.macro b/macros/cflags.macro
index 5dee6f88..a2c583c5 100644
--- a/macros/cflags.macro
+++ b/macros/cflags.macro
@@ -1,6 +1,7 @@
 
 # Export CFLAGS + CXXFLAGS
-GLOBAL_CFLAGS   = -O2 -g -pipe -Wall -fexceptions --param=ssp-buffer-size=4
+GLOBAL_CFLAGS   = -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fPIC
+GLOBAL_CFLAGS  += -fstack-protector-all --param=ssp-buffer-size=4
 
 CFLAGS_i686     = -m32 -march=i686 -mtune=atom -fasynchronous-unwind-tables
 CFLAGS_x86_64   = -m64 -mtune=generic